Sign in

v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1423146150.1 KB

Retrieves the certificate and certificate chain for your private certificate authority (CA) or one that has been shared with you. Both the certificate and the chain are base64 PEM-encoded. The chain does not include the CA certificate. Each certificate in the chain signs the one before it.

post/#X-Amz-Target=ACMPrivateCA.GetCertificateAuthorityCertificate

Headers

X-Amz-Target'ACMPrivateCA.GetCertificateAuthorityCertificate' required

Request body

CertificateAuthorityArnstring required
<p>The Amazon Resource Name (ARN) of your private CA. This is of the form:</p> <p> <code>arn:aws:acm-pca:<i>region</i>:<i>account</i>:certificate-authority/<i>12345678-1234-1234-1234-123456789012</i> </code>. </p>

Response

Success

Certificatestring

Base64-encoded certificate authority (CA) certificate.

CertificateChainstring

Base64-encoded certificate chain that includes any intermediate certificates and chains up to root certificate that you used to sign your private CA certificate. The chain does not include your private CA certificate. If this is a root CA, the value will be null.